VMR Posted May 14, 2010 Share Posted May 14, 2010 I ran a backup before I sold the old computer, and I recently opened up some of the pictures and programs I had saved, and my antivirus kicked in and deleted one of the programs. I had been using that program for quite a long time, so I realized the people who sent out that trojan had already had control of my computer for quite some time. The old computer is no longer infected, and I changed all my passwords since then, so I didn't get that frightened.Then I thought I'd better be on the safe side, because it's not that hard to merge a .exe file with another innocent looking file, so I ran a netstat -a and this is the resaultWhen I usually do it, I get a few ones with the local adress 0.0.0.0:xxxxx or 192.168.1.1.100:xxxxx to the same external adress. I know some of them, like xxx.xxx.x.xxx:6667 is mIRC and so on.I have uTorrent open, and that makes connections with a lot of other programs, but won't that just show a lot of connections through 1 port? Quote Link to comment
MiF Posted May 14, 2010 Share Posted May 14, 2010 I use bittorrent. and that uses that one port to link all the connections.just answer for that. Quote Link to comment
Ywa Posted May 14, 2010 Share Posted May 14, 2010 Why don't you disable uTorrent and try it again? :') Quote Link to comment
VMR Posted May 14, 2010 Author Share Posted May 14, 2010 (edited) Oh lol, I forgot to look at the process ID xDAt least half of them was from the same program 6448 is uTorrent I checked the PID on the other ones aswell, and they were all from legit programs. Edited May 14, 2010 by Sacrifical Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.